Establishing a Coordinated Vulnerability Disclosure Program to Work With Security Researchers

Establishing a Coordinated Vulnerability Disclosure Program to Work With Security Researchers
Advisory ID: node-25158
Developed by CISA, the National Security Agency (NSA) and international partners, this joint guidance contains best practices for software manufacturers and online service providers to design and implement a coordinated vulnerability disclosure (CVD) program for working with external security researchers that includes a clear vulnerability disclosure policy (VDP) and process for triaging, remediat
Severity: moderate
Published (UTC): 2026-07-15T12:00:00.000Z
Source: CERT
Original source: https://www.cisa.gov/resources-tools/resources/establishing-coordinated-vulnerability-disclosure-program-work-security-researchers